Skip to content
OpenAdvisories
Unscored CVE-2021-43086 EUVD-2021-30039GHSA-4jw7-vxxv-4m7h

ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a s…

Published Feb 28, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in function compress_symbolic_block_for_partition_2planes() in "/Source/astcenc_compress_symbolic.cpp".

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 astc-encoder No fix yet —
Ubuntu 26.04 LTS astc-encoder No fix yet —
Ubuntu 25.10 astc-encoder No fix yet —
Ubuntu 24.04 LTS astc-encoder No fix yet —
Ubuntu 22.04 LTS astc-encoder No fix yet —

References